---
sourceDocument: Zurich ServiceNow AI Platform Capabilities
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/servicenow-platform

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich ServiceNow AI Platform Capabilities

ft:clusterId :

    - platcap

bundleId :

    - platcap

workflow :

    - Platform


---

# Integrate Password Reset with your Active Directory service

# Integrate Password Reset with your
Active Directory service {#ariaid-title1}

* Release version: Zurich
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Password Reset application can change passwords on an Active
Directory credential store. The application changes passwords by referencing an Active
Directory user role with the appropriate password change privileges.

## Before you begin

Role required: admin

Before you begin, make sure the following prerequisites are met:

* [MID Server](https://www.servicenow.com/docs/CYRK~P59BBRJ0zJYVtxakw "Download and install the MID Server on the host machine, test the connection, and then validate the MID Server. Use the manual procedures or the guided setup. Set up multiple MID Servers for load balancing and domain separation. These procedures prepare it for use with any application.") installed and running on a Windows computer that can connect to an Active Directory.
*
  * Reset password
  * Read/Write pwdlastset
  * Read/Write UserAccountcontrol
  * Write Account Restrictions
  * Read/Write lockouttime
  * Read MemberOf
  {#t_ConPassResetActiveDir__ul_bl2_dlx_bq}

{#t_ConPassResetActiveDir__ul_ijr_3rs_djc}  
Descendent Group objects:

* Read Members
* Read MemberOf
{#t_ConPassResetActiveDir__ul_jl2_dlx_bq}

## Procedure

1. [Install a MID
   Server](https://www.servicenow.com/docs/CYRK~P59BBRJ0zJYVtxakw "Download and install the MID Server on the host machine, test the connection, and then validate the MID Server. Use the manual procedures or the guided setup. Set up multiple MID Servers for load balancing and domain separation. These procedures prepare it for use with any application.") on a Windows computer that can connect to Active Directory.
2. [Configure the MID
   Server](https://www.servicenow.com/docs/cMVtBe3HRpqPrHwtEP16Zg "After installing and validating your MID Servers, ensure that they have access to sufficient system resources, probe the proper targets, and communicate with the instance as expected. Configure MID Server selection criteria, create clusters for failover protection, and set up MID Servers in different domains to protect data.").
3. If using the Workflow and Orchestration add-ons, in the ServiceNow instance, navigate to OrchestrationCredentials.
4. Click New, complete the form with the following values for the AD credential, and then click Submit.  
   {#t_ConPassResetActiveDir__table_fsl_f34_nbb__entry__2}

   | Field | Description |
   |-|-|
   | Type | Select Windows. |
   | User name | Enter your Active Directory domain user. For example, domain\\admin. |
   | Password | Enter your Active Directory domain user password. |
   | Applies to | Select the MID Server that you use to access the Active Directory server. |
   [ ]

   {#t_ConPassResetActiveDir__table_fsl_f34_nbb}  
   Note:  
   If you are using Integration Hub, from the Microsoft AD Credential store, click Microsoft AD Connection Alias to create a new connection. To learn more, see [Set up the Microsoft
   AD v2 spoke](https://www.servicenow.com/docs/access?context=setup-ms-ad-v2&version=zurich&pubname=zurich-integrate-applications&ft:locale=en-US).
{#t_ConPassResetActiveDir__steps_ggp_hgg_m4b}

## What to do next

Create a connection to the credential store as described in [Configure the connection to
an AD credential store](https://www.servicenow.com/docs/UVaLpqaZk6QkiNAaijywvg "You can create a Password Reset credential store record to configure access to your Active Directory server while a user is changing or resetting a password. In addition to host connection information, you can specify the password hints that users should see, restrictions on password reuse, the allowed number of failed reset attempts, and other settings.").

*[\>]: and then